Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 12:23
Behavioral task
behavioral1
Sample
d39fc73610d05ee8598b6240feef1bf1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d39fc73610d05ee8598b6240feef1bf1_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
d39fc73610d05ee8598b6240feef1bf1_JaffaCakes118.pdf
-
Size
83KB
-
MD5
d39fc73610d05ee8598b6240feef1bf1
-
SHA1
6392d8637df87b524a7066412aa7d2ffa2964790
-
SHA256
f192e49a355502b83df51e8819bf1b126b97f8e07582df41851c57a4ece781e2
-
SHA512
a11d921f1d502018a711f58d70ed1971bb03300e2857b190c75c9cd06281c5807baed9a3879659378c69c38ac0de6721ff1023757b4cc4dc0c1a8696492d162a
-
SSDEEP
1536:1Bz98GsHVUGbQayHkaO9DW+MOIGQHoNhGW8thdBqAaWApO6HV8:DzqB1qasx0M15HoNh8doAR6C
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d39fc73610d05ee8598b6240feef1bf1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD542be77d1520d7d539e9ef34168db1fe9
SHA156f1d69da8de39e586b53335eecce537b687dc33
SHA256e9711d7dc51add5ff76c1cfac6660c0dbbee819ca15270eb5a00f86cacb90892
SHA51290275dbec50ea71ef521c961d22f44f3a2354023a48510d428520bfc5559720b2d20f1e755e9d2602d4b8d89538fe7c3515283359b43f71b7a6961d710ef705c